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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 



Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH{S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )S Responsive to communication(s) filed on 19 July 2004 , 
2a)[2 This action is FINAL. 2b)n This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 19-26 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) S Claim(s) 79-26 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification Is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: aO accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawjng(s) Is objected to. See 37 CFR 1.121(d). 
1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-{d) or (f). 
a)n All b)n Some * 0)0 None of: 

1 .□ Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 

3.n Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attach ment(s) 

1 ) IE Notice of References Cited (PTO-892) « 4) □ Inten/iew Summary (PTCM13) 

2) □ Notice of Draflsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) 13 Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5) ED Notice of Informal Patent Application (PTO-1 52) 

Paper No(s)/Mail Date 10/05/2004 . ^ 6) □ Other: . 



U.S. Patent and Trademark Office 

PTOL-326 (Rev. 1-04) 



Office Action Summary 



Part of Paper No./Mail Date 20041 113 
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1 . Claims 1 9-26 are presented for examination. 

2. Claims 1-1 8 have been cancelled at the request of applicant. 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for the 
rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an applicatbn filed in the United States 
only rf the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

4. Claims 19-26 are rejected under 35 U.S.C. 102(e) as being anticipated by Antur et al. (6,212,558). 

5. Antur et al. reference was cited by applicant on the paper of 10/05/2004. 

Antur et al taught the invention (claim 19) as claimed including method for securing data communication 
between a client ( col. 4, lines 1-7) in an internal network (col. 4, lines, 10-14) and a server (col. 3, lines 46-57) in an 
external network (col. 4, lines 19-24) byway of an application-level gateway proxy server (col. 3, lines 38^3) in the 
Internal network, the method comprising performing, at the proxy server, a network address translation upon a stream 
of packets originating from the client, wherein the network address translation is performed at a packet level; filtering, 
at the proxy server, the stream of packets, wherein the filtering is transparent to the dient and wherein the filtering is 
performed at a stream level; and transmitting, at the proxy server, the packets to the server after the packets are 
filtered (col. 4, lines 1-7, col. 4, lines 27-67, col. 3, lines 58-67, col. 5. lines 10-20, col. 5. lines 27-46). 

As to daim 20, Antur et al. taught filtering at the proxy server, a second stream of packets originating from 
the server in the external network, wherein the filtering is transparent to the client, and wherein the filtering is 
performed at a stream level; performing, at the proxy server, a reverse network address translation upon the packets 
in the second stream wherein the reverse network address translation is performed at a packet level; and 
transmitting, at the proxy server, the packets in the second stream after the packets are filtered (col. 4. lines 1-7, col. 
4, lines 27-67. col. 3. lines 58-67, col. 5, lines 10-20. col. 5, lines 27-46). 

As to daim 21, Antur et al. taught computer-readable medium having Instructions stored thereon for 
execution by a processor to perform a method offer securing data communication between a dient ( col. 4, lines 1-7) 
in an internal network (col. 4. lines. 10-14) and a server (col. 3, lines 46-57) in an external network (col. 4, lines 19- 
24) by way of an application-level gateway proxy server (col. 3, lines 38-43) in the internal network the method 
comprising: performing, at the proxy server, a network address translation upon a stream of packets originating, from 
the clients wherein Ihe network address translation is performed at a packet level filtering at the proxy server the 
stream of packets wherein the filtering is transparent to the client wherein the filtering performed at a stream level: 
transmitting, at the proxy server, the packets to the server after the packets are filtered (col. 4, lines 1-7, col. 4, lines 
27-67, col. 3, lines 58-67, col. 5. lines 10-20, col. 5, lines 27-46). 
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As to daim 22, Antur et al., system for securing data communication across an external computer network, 
comprising: a client ( col. 4, lines 1-7) located in an internal computer network (col. 4. lines, 10-14); a server (col. 3, 
lines 46-57) located in the external computer network (col. 4, lines 19-24) and in communication with the client; and 
a an application-level gateway proxy device located in the internal computer network and comprising components for 
(1) performing, at a packet level, a network address translation upon a stream of packets originating from the client 
and (2) filtering, at a stream level, the stream of packets and transmitting the packets to the server, wherein the 
filtering is transparent to the client (col. 4, lines 1-7, col. 4, lines 27-67, col. 3, lines 58-67, col. 5, lines 10-20, col. 5, 
lines 27-46). 

As to daim 23, Antur et al. taught the components of the proxy device comprise: a first component for 
filtering said stream of packets, and also for filtering, a stream level and transparently to the dient. a second stream 
of packets originating from the server; and a second component for performing said network address translation, and 
also for performing at a packet level, a reverse network address translation with respect to the packets in the second 
stream and transmitting the packets in the second stream to the client (col. 4, lines 1-7, col. 4, lines 27-67, col, 3, 
lines 58-67, col. 5, lines 10-20, col. 5, lines 27-46). 

As to daim 24, Antur et al. taught An applicatiorvlevel gateway proxy device located In an internal network, 
comprising: a component for performing, at a packet level, a network address translation with respect to a stream of 
packets originating from a client in the internal network, when wherein the client is communicating the stream of 
packets to a server located in an external network; a component for filtering at a stream level, the stream of packets, 
wherein the filtering is transparent to the dient; and a component for transmitting the packets to the server after the 
packets are filtered (col. 4, lines 1-7, col. 4, lines 27-67, col. 3, lines 58-67, col. 5, lines 10-20, col. 5, lines 27-46). 

As to daim 25, Antur et al. taught the proxy device further comprising: a component for filtering, at a stream 
level and transparently to the dient, a second stream of packets originating from the server; a component for 
perfomning, at a packet level, a reverse network address translation upon the packets in the second stream; and 
component for transmitting the packets in the second stream to the dient (col. 4, lines 1-7, col. 4, lines 27-67, col. 3, 
lines 58-67, col. 5, lines 10-20, col. 5, lines 27-46). 

As to daim 26, Antur et al. taught the method further comprises: filtering, at the proxy server, a second 
stream of packets originating from the server in the external network, wherein the filtering is transparent to the client, 
and wherein the filtering is performed at a stream level; performing, at the proxy server, a reverse network address 
translation upon the packets in the second stream, wherein the reverse network address translation is performed at a 
packet level; and transmitting, at the proxy server, the packets in the second stream after the packets are filtered (col. 
4, lines 1-7, col. 4, lines 27-67, col. 3, lines 58-67, col. 5, lines 10-20, col. 5, lines 27-46). 
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6. The prior art made of record and not relied upon is considered pertinent to applicant's disclosure. 
Casey 6,493,349 

Mayes etal. 6,510,154 
Mayes et a! 5,793,763 

7. Applicant's amendment necessitated the new ground{s) of rejection presented in this Office action. 
Accordingly, THIS ACTION IS MADE FINAL See MPEP § 706.07(a). Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

8. A shortened statutory period for reply to this final action is set to expire THREE MONTHS from the mailing 
date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date of this final action and 
the advisory action is not mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, however, will the statutory 
period for reply expire later than SIX MONTHS from the date of this final action. 

Any Inquiry concerning this communication or earlier communications from the examiner should be directed 
to Lany D Donaghue whose telephone number is 571-272-3962. The examiner can normally be reached on M-F 
8:00^5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, John 
Follansbee can be reached on 571-272-3964. The fax phone number for the organization where this application or 
proceeding is assigned Is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent Application Information 
Retrieval (PAIR) system. Status infomnation for published applications may be obtained from either Private PAIR or 
Public PAIR Status information for unpublished applications is available through Private PAIR only. For more 
Information about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



